NCSC-TAD-2110-004
مستوى الخطورة: منخفضة
تهديد
الرقم المرجعي: NCSC-TAD-2110-004CVSS 0
DEV-0343 Operating Against the US and Middle East
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- غير متوفر
نظرة عامة
An Iranian threat group known as DEV-0343 is targeting more than 250 Office 365 tenants in United States and Middle East by password spraying attacks.
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
Enable Multifactor Authentication (MFA).
- 02
Using passwordless solutions like Microsoft Authenticator.
- 03
Review and enforce recommended Exchange Online access policies
- 04
Block ActiveSync clients from bypassing Conditional Access policies.
- 05
Block all incoming traffic from anonymizing services.